Cyber Security Engineer

Title: SW Cyber Security Engineer (Mid-Level)
Location: Reston VA- Locals only - Hybrid (onsite 1x per month in Reston VA)
Rate: $70/hr W2
Interview: Video then onsite is required
LinkedIn required! 
 
We are is seeking a mid-level, SW application focused, Cyber Security Engineer who has strong AWS Cloud Vulnerability Management and application testing experience leveraging one or more of the following tools - Checkmarx, Contrast Security, TideLift, Burp Suite, OWASP Dependency Check, or Fortinet - within a Java / AWS Cloud Environment.
 
This 6 month+ contract position is Hybrid (onsite 1x per month in Reston VA) and requires an final onsite/F2F interview in Reston VA as well.
 
Required Skills
- Hands-on experience with application security, software development, secure SDLC, DevSecOps practices, CI/CD automation.
- Experience with one or more programming or scripting languages such as Java, JavaScript, Python with focus on secure coding practices and vulnerability management.
- Deep understanding of operating systems (Linux/Windows), networking protocols, and scripting /programming languages like python.
- Experience with container security, Kubernetes, Helm, Docker, and cloud native workload protection.
- Familiarity with application security testing tools such as Checkmarx, Contrast Security, TideLift, Burp Suite, OWASP Dependency Check, Fortinet or similar platforms.
- Experience with vulnerability identification, triage, remediation validation, and risk-based prioritization.
- Experience working with CI/CD and source code management platforms such as Bitbucket, GitLab, GitHub, Jenkins, or similar tools.
- Experience supporting security automation, metrics reporting, and vulnerability management integrations with tools such as Jira, ServiceNow, or risk management platforms
- Hands-on experience securing cloud environments, preferably AWS.
- Professional certifications such as the Offensive Security Certified professional (OSCP) or Certified Ethical Hacker (CEH) preferred.
 
Additional Comments
Must live in DC, MD, VA (DMV) - Interview Process: 2 rounds, second round will be a F2F - must be A/OKAY with F2F in Reston
- Similar to the SR level, but this is a mid level (5 years exp)
- Application Security side (not infrastructure) - Must have application security background, strong in SDLC, DevSecOps, DevOps, Cloud Security related to Containers / EKS, cloud migration background b/c alot of migrations happening, CI/CD Jenkins Pipeline, how application security gets embedded into the SDLC process
- Very important to have strong AWS Cloud Security background! Securing cloud environments is KEY
- A lot of interactions with Development team so must have strong communication skills
- Must have: Extensive experience with CNAPP, CSPM, KSPM, CWPP or cloud native security platforms
- One difference: This person should have strong Vulnerability MGT and testing tools such as application security testing tools such as Checkmarx, Contrast Security, TideLift, Burp Suite, OWASP Dependency Check, Fortinet or similar platforms.
- Must have strong Java tech stack background (not .Net or others, they are a java shop)